Scan results for trivy shows potential container vulnerabilities

[ainsofs]

Codebase
Built-in vanilla Drupal or mounted codebase

Describe your issue
Not sure if this is any concern. I scanned the drupal-php container using trivy tool and it returned these results:

https://trivy.dev/results/?image=wodby/drupal-php

It lists the following vulnerabilities:

• CVE-2022-42915
• CVE-2022-42916
• CVE-2022-32221
• CVE-2022-42898

[csandanov]

This scan is not correct, they just look up curl version and assume it's vulnerable when in fact curl is already patched. Please see https://git.alpinelinux.org/aports/tree/main/curl?h=3.15-stable, we install curl from alpine package repositories and you can see there's a list of patches applied there during the package build. The first three CVEs reported are patched, the fourth link just returns not found